Description
ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled.
References
- RHSA-2001:138 vendor-advisory
- http://marc.info/?l=lprng&m=100083210910857&w=2
- HPSBUX0112-009 vendor-advisory
- RHSA-2001:112 vendor-advisory